Overview
The Rules Governing the National Register of Controllers Within the Kingdom Article 10 regulates the issuance, validity, and renewal of the registration certificate issued to Controllers registered on the National Data Governance Platform.
It defines the mandatory contents of the certificate, establishes its maximum validity period, and sets out notification and grace period rules applicable upon expiry.
SDAIA's Official Text
The text below reproduces official PDPL law, regulation, or guideline issued by the Saudi Data & AI Authority, verified against the original SDAIA source. No changes or reinterpretation applied.
Article 10: Registration Certificate Issuance
- The registration certificate shall be issued as soon as the registration process, stipulated in Article (4) of these rules, is completed. The certificate shall include the following information:
- Registration Serial Number.
- Entity/Individual Name.
- Entity Logo.
- Entity Address.
- Official Email of the Entity/Individual.
- Official Contact Number of the Entity/Individual.
- The Date of Issue and End Date.
- QR code.
- The certificate will be valid for (5) years as maximum.
- The Competent Authority shall notify the Controller of the impending expiration of their registration certificate no less than thirty (30) days prior to the expiry date. Following the expiration of the certificate, the Controller may continue to access Platform Services for a grace period of up to five (5) days. However, access to services beyond this grace period shall be contingent upon the Controller submitting a renewal request.
Plain-Language Explanation
The explanation below is provided to help you understand the SDAIA’s legal text and does not replace or override the official PDPL law, regulation, or guideline.
Article 10(1)
Issuance of the Registration Certificate
This provision establishes that the registration certificate is issued immediately upon completion of the registration process in accordance with Article 4 of these Rules. The issuance of the certificate confirms the Controller’s successful registration on the Platform and formal inclusion in the National Register of Controllers.
This provision also specifies the minimum information that must be included in the registration certificate, including identification details, official contact information, validity dates, and a QR code. These elements ensure verifiability, transparency, and traceability of the Controller’s registration status.
